Privacy Policy

Effective Date: 10 October 2025 | Owner: Vidhvantri Technologies LLP | Jurisdiction: Chennai, Tamil Nadu, India

1. INTRODUCTION

1.1. This Privacy Policy describes how FluxLMS, a cloud-based SaaS LMS operated by Vidhvantri Technologies LLP, collects, processes, stores, and protects personal and institutional data. It applies to all Users (students, educators, institutions, corporate clients, administrators, or guests) interacting with the Platform. By using FluxLMS, you consent to the data practices described herein.

1.2. Crucially, FluxLMS provides learning management and marketplace tools but explicitly does not collect, process, or store course enrolments payments or any financial credentials related to transactions between students and instructors.

2. DATA WE COLLECT

2.1. We collect data strictly necessary for service provision, adhering to data minimization. Collected types include:

(a) Personal Identifiers (name, email, phone, government IDs where required);

(b) Institutional Metadata (org name, student ID, enrolments records);

(c) Educational Content and Logs (quiz responses, progress metrics);

(d) Technical Data (IP, cookies, logs);

(e) Communication logs.

2.2. Uploaded Payment Proof Metadata: Transaction ID, date, amount, and screenshots are processed purely for Instructor tracking. FluxLMS does not collect bank accounts, UPI PINs, or credit card numbers.

3. PURPOSE OF PROCESSING

3.1. Data is processed for lawful purposes including account creation, course delivery tracking, analytics dashboards for instructors, payment-proof administrative workflows, platform technical support, legal compliance, and real-time fraud monitoring and infrastructure security.

4. DATA OWNERSHIP AND ROLES

4.1. Users retain full and exclusive ownership, including intellectual property rights, over all Content and data. Vidhvantri acts primarily as a Data Processor where Users are Data Controllers, and as a Joint Controller for technical logs.

5. DATA RETENTION

5.1. We retain personal data for the duration of your active subscription plus ninety (90) days post-termination for restoration. Soft deletion occurs within 24 hours, permanent production erasure within 30 days, and backup destruction within 180 days.

6. THIRD-PARTY SERVICES

6.1. FluxLMS utilizes reputable providers: AWS India for cloud hosting in the Mumbai region (ap-south-1) with strict residency commitments; analytics partners under GDPR Article 28-compliant DPAs; and SMS/Email transaction providers.

7. SECURITY

7.1. We implement multi-layered security: Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), industry-standard encryption at rest and in transit, daily encrypted snapshots with 30-day retention, and a 72-hour breach notification protocol.

8. USER RIGHTS

8.1. Users may exercise data rights via the self-service portal or by emailing dpo@fluxlms.com. Your rights include access, rectification, erasure, processing restriction, data portability, and consent withdrawal.

9. INTERNATIONAL TRANSFERS

9.1. Data may be transferred to AWS regions outside India solely for disaster recovery purposes, governed by Standard Contractual Clauses (SCCs 2021/914) and Binding Corporate Rules.

10. DISCLAIMER

10.1. FluxLMS is not responsible for information related to External Payments, financial disputes between users, the validity of payment proofs uploaded by students, or legal compliance outside India.

11. POLICY UPDATES

11.1. Vidhvantri may update this Policy periodically. Material changes will be communicated via email or platform notification at least 15 days prior to enforcement.